Getting Data In

splunk universal forwarder error installation on Windowa via PowerShell

lumi
Loves-to-Learn Lots

Getting this error via Power Shell for the Splunk Universall installation

 

Error below

The term 'C:\Program Files\SplunkUniversalForwarder\bin\splunk' is not recognized as the name of a cmdlet, function, script file, or operable

program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.

working.ps1:17 char:3

 

Here is how i defined my variables

$SplunkInstallationDir = "C:\Program Files\SplunkUniversalForwarder"

& "$SplunkInstallationDir\bin\splunk" start --accept-license --answer-yes --no-prompt

 

It works if i run manually only.  

Kindly assist

Labels (2)
0 Karma

tscroggins
Champion

Hi @lumi,

Although your command should work, you might try:

$SplunkInstallationDir = "C:\Program Files\SplunkUniversalForwarder"
& "$($SplunkInstallationDir)\bin\splunk.exe" start --accept-license --answer-yes --no-prompt

# or

$SplunkExe = "C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe"
& $SplunkExe start --accept-license --answer-yes --no-prompt

To run "splunk start," the account should have Full Control permission on C:\Program Files\SplunkUniversalForwarder and all subdirectories and files. Ideally, the command should be executed by the service account, assuming the forwarder is also configured to run as a service.

0 Karma
Get Updates on the Splunk Community!

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...